SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
10 Articles
10 Articles
BleepingComputer
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...]
Seven vulnerabilities affecting SonicWall firewalls have just been corrected. One of them allows to bypass the dual authentication of corporate VPNs and figure is already exploited.
Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)
SonicWall has fixed an exploited SonicOS SSL-VPN vulnerability (CVE-2026-19868) that may allow attackers with valid credentials to bypass SAML-enforced multi-factor authentication. With no workarounds listed, the company has urged admins to patch quickly. About CVE-2026-19868 CVE-2026-19868 is an authentication enforcement flaw in the SonicOS SSL-VPN service, and is exploitable only if SAML is enabled for SSL-VPN logins. According to SonicWall, …
SonicWall warns for a quick update: attackers abuse a security vulnerability in SonicOS' SSLVPN. CISA also warns.
SonicWall has patched an SSL VPN vulnerability in SonicOS. The SonicWall SonicOS vulnerability, coded as CVE-2026-19868, could bypass SAML authentication and multi-factor authentication (MFA); it may have been exploited in attacks.
SonicWall Warns of Potential In-the-Wild Exploitation of SSLVPN Flaw That Bypasses MFA
SonicWall has warned customers to patch a SonicOS SSLVPN vulnerability that could let attackers bypass SAML authentication and its multi-factor authentication checks. Tracked as CVE-2026-19868, the flaw carries a CVSS score of 7.1. The company has investigated a report indicating potential exploitation and strongly urges customers to upgrade promptly. The issue affects SSLVPN only when SAML is enabled for logins. An attacker must have valid cred…
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
